Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3334203d3e20323639303438.roa
File:                     323830343a356561383a3a2f33322d3334203d3e20323639303438.roa (raw, json)
Hash identifier:          NclRnOIWHQzbLVKk21l5CI3CaOZi9iwSxB8YunXddTA=
Subject key identifier:   05:0F:BE:C6:E0:D3:B8:8C:B0:C8:28:49:6A:AC:59:99:E6:62:FA:ED
Certificate issuer:       /CN=0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A
Certificate serial:       6AC8A23DD0B15BD6CA3A945B97985EB1F11D10EC
Authority key identifier: 0A:DB:27:B7:BF:0D:79:A6:7B:C3:F8:3E:18:AC:CB:AB:EE:0F:57:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3334203d3e20323639303438.roa
Signing time:             Mon 06 May 2024 16:47:04 +0000
ROA not before:           Mon 06 May 2024 16:42:04 +0000
ROA not after:            Mon 05 May 2025 16:47:04 +0000
asID:                     269048
IP address blocks:        2804:5ea8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.crl
                          rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c8:a2:3d:d0:b1:5b:d6:ca:3a:94:5b:97:98:5e:b1:f1:1d:10:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A
        Validity
            Not Before: May  6 16:42:04 2024 GMT
            Not After : May  5 16:47:04 2025 GMT
        Subject: CN=050FBEC6E0D3B88CB0C828496AAC5999E662FAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:f5:28:85:66:ad:ff:af:1e:53:1b:9b:05:
                    53:ca:d6:cc:a6:d1:37:c2:f0:ea:d2:dc:41:22:8f:
                    2a:ea:c9:6b:90:46:21:ec:ec:f9:91:c2:f6:08:dc:
                    65:04:e0:af:2e:70:f0:8f:05:50:ea:06:67:f3:66:
                    4e:da:d2:3b:df:ab:78:4e:aa:12:a5:7a:cf:bb:ae:
                    ee:3c:ee:12:23:df:73:a3:fb:d1:d4:e1:08:26:1f:
                    7f:07:8f:a2:b1:b2:7c:19:00:60:f7:81:fc:f8:a3:
                    36:4a:e1:d8:39:77:d1:e3:dd:5c:4c:75:a3:75:b9:
                    2d:b1:13:cb:d8:f2:2d:07:c4:d7:f5:ec:76:27:6b:
                    0e:64:eb:18:b4:3b:de:cb:05:27:d1:da:ba:d6:c3:
                    e6:d6:df:de:e5:1a:ff:c4:b5:69:42:9b:b0:33:23:
                    04:3a:c4:11:64:98:1c:8d:42:28:55:92:43:32:68:
                    7f:7e:67:66:a3:6b:8a:1d:bd:77:19:0a:a4:19:79:
                    6e:c4:fb:65:ae:d7:38:e0:e8:61:86:c9:77:c9:a2:
                    f5:23:31:9f:05:f6:85:e0:04:e4:78:ce:e9:89:f5:
                    b2:88:9d:15:83:ac:79:d1:f6:d1:2b:09:2c:ba:71:
                    30:02:73:4a:f7:8d:73:32:06:f4:41:b4:0c:66:ce:
                    ff:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0F:BE:C6:E0:D3:B8:8C:B0:C8:28:49:6A:AC:59:99:E6:62:FA:ED
            X509v3 Authority Key Identifier:
                keyid:0A:DB:27:B7:BF:0D:79:A6:7B:C3:F8:3E:18:AC:CB:AB:EE:0F:57:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3334203d3e20323639303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ea8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:64:53:ed:b3:ed:9c:f0:ae:7b:66:f2:26:b6:b1:52:ce:96:
         b8:74:e8:51:8d:e1:05:9c:95:db:f6:b0:f2:e6:3c:74:5b:ca:
         b9:f0:88:a4:62:46:3f:bd:60:8f:f6:57:54:d5:55:81:ea:06:
         e4:64:51:55:39:b7:70:4d:0d:a4:3c:d6:38:e8:40:56:7b:20:
         18:47:4c:2f:57:b7:bf:45:e9:a7:87:0c:c8:23:6a:ab:b1:f7:
         00:52:25:62:e8:31:4e:78:22:2b:00:cd:e1:06:51:9f:bf:d7:
         63:37:3c:87:97:fb:92:99:4c:35:08:19:84:7a:f7:29:db:2e:
         f3:60:8c:ac:a8:08:a9:d3:66:4a:49:f7:e4:6a:9c:74:8b:0b:
         08:80:96:bb:28:1a:45:fa:eb:f6:84:be:42:1b:93:c7:2e:6b:
         fe:1e:0e:ff:a9:21:24:84:d0:af:2d:ec:4d:2e:9b:79:75:e3:
         e6:9e:ee:18:35:dc:5c:19:fa:03:7a:b2:f2:21:18:80:7d:18:
         1e:c6:7d:89:15:4b:e0:9b:a1:f9:9a:b6:50:10:f1:ee:0d:b8:
         9f:99:b3:20:90:d1:37:ef:af:dc:e1:33:95:23:f0:a7:56:2d:
         bc:8f:ca:db:50:cc:08:ae:9e:48:eb:4c:c5:3e:0f:cd:cf:1a:
         48:5c:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:16 2024 by rpki-client on console-ams.rpki-client.org